Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“didn't receive one of the items”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
95f76b53a4876b9e1d7329c7671a931692e0c4ec1a5b75fc7c3c2de0e27d90ca
Signature (Ed25519, base64)
xG/79XX6kTtdxcGitGl3o+KK0jOe5ia0K4MAyedmA83sYC6sFcQYv5QP2egIqu+tw2BoZo4fi1FJe4TKLzmGDQ==
Merkle root
04b39eaa56e1cf8f75dc8eac18bf6942167c8418ea731a7471223f0be60e3e6c
Merkle path
["95f5d8a1c18c8b2954692f49a0a10cd33ca512aa2168335d045853c1ea3015ee","fc6c9802daf879ec17b413717aef17ee6413877890e3001b258574e03cb8a620","dfed23389b50b9ca5c1623b4e179910d0ef4b5616233bc0c8c100917eb36d7bf","6afdac771f14e8e4b2488f5fcb34c27ddee5a96d9062143a6709f99b04c3b585","ba553f840eaa5d9770b0a2a9fc503f2de195828b832b8114e38c6b5dd6f1dc55","4afe63e885526fb32845f56620538687b877e620bd50122501ab6e8c8184f165","4be11625b93df682554c5467c0303c7880a647a8375884c262fcef5f8c29cdc9","142dff5d320567324c7001d15284540b53db51080a209418c9a9690fc721435f","bde2e29974cbfb4b8520a6bc8c13a6c582d6d33a3bfb2d8c4de765443602d0ec","5029c0cd7a217de8e5380792c559773b1f6d07eb73eaa3da0a8590fdb4ac0f92","d5bf8a1456c490033db5740713d3a0c23312448ec90e6197c0599b907d11362b","f0d4b36101a4d2ca1d8116d828ed0bb21fb3a69b4052c988940bedd5b667205e","2a4eedd2e6770f347c97e6f4e61cb85be4af21173e299d5507007ad47305b4c9","c5cc7ab668acd70733708092004f0624164aaac2bfd55cacefad6637b26146b8","695aed3f647000e14ed985f8c4d6045987ffb913dd12c814d6f9a495d4d25fd3"]
Anchored
2026-09-19
Public log entry
search.sigstore.dev, log index 2890214870 · entry 108e9186e8c5677af53b…
Expected log hash
1f3acef0f063246e051bf412e40f4279cb96ed334ff7b0647a13320c1b31c4fa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789722569406","kind":"published-quote","locale":"en","page":"subtheme:ifood/delivery/poor-support/en","quote":"didn't receive one of the items","rating":1,"review_date":"2026-09-01","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id483017239?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04b39eaa56e1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.